Skip to content

ScanRook v1.7.0

Choose a tag to compare

View all tags
@devinshawntripp devinshawntripp released this 01 Mar 05:03
· 181 commits to main since this release
v1.7.0
1ee6018

What's New

Pre-compiled Vulnerability Database

  • scanrook db fetch downloads a pre-built SQLite DB (497K OSV, 335K NVD, 318K EPSS, 1.5K KEV, 240K Debian, 48K Alpine)
  • scanrook db build builds the DB locally for air-gapped environments
  • Cache priority: SQLite DB → File cache → PostgreSQL → Live API
  • Cold scans drop from 20+ minutes to seconds
  • Works without the DB (falls back to live APIs)

Compression

  • zstd compression for internal payloads (30-40% better than gzip)
  • OSV payloads stripped of unused fields (~50-60% smaller)
  • Payloads stored once per vuln ID, not per affected package

Benchmarks (warm cache)

Image ScanRook Trivy Grype
alpine:3.20 0.1s / 7 0.1s / 0 1.2s / 4
debian:12 2.1s / 196 0.2s / 92 1.2s / 86
nginx:1.27 2.7s / 506 0.2s / 253 1.6s / 248
Assets 5
Loading